Google Analytics 4 is controlled from a country outside the EU and lacks confirmed EU data storage: processing effectively takes place in a third country. That makes the tool unsuitable for sensitive personal data without additional safeguards. For non-personal data (drafts, public material) it is usually fine.
EU/EEAWeb analyticsFrom approx 390 SEK/monthEU data storage ✓ISO 27001
Polish GA4 challenger in enterprise class with analytics, tag manager and consent management in one package. The Business plan is hosted by Swedish Elastx. The catch: the free Core plan was discontinued in February 2026, so the entry cost is now EUR 35 per month.
The interface is available in Swedish
EU company with Business hosting by Swedish Elastx, so data can stay in Sweden
Free Core plan was shut down in February 2026, now only paid plans exist
Best for: Authorities, healthcare providers and larger companies that want GA-like power with EU sovereignty and Swedish hosting
EU/EEAWeb analyticsFrom approx 100 SEK/monthEU data storage ✓
Estonian, cookieless and lightning-fast analytics tool with all data at Hetzner in Germany, GDPR-friendly without a consent banner. The catch: no free plan and deliberately stripped down, so advanced analytics needs hit the ceiling.
EU company (Estonia) with all data at European providers in Germany and Finland
Fully cookieless: no consent banner required for basic measurement
No free plan, only 30-day trial
Best for: Small and medium-sized businesses that want to skip the cookie banner and get understandable statistics on a single page
Dutch, extremely stripped-down analytics tool without cookies where data never leaves the Netherlands, and a free plan exists. The catch: the free plan only keeps 30 days of history and feature depth is the thinnest in the category.
Dutch company: data is stored only in the Netherlands and never leaves the EU
Completely cookie-free and without personal data, no consent banner needed
Free plan only keeps 30 days of history
Best for: Solopreneurs and small businesses that just want to see visitor numbers without a cookie banner, configuration or analytics expertise
No, Google Analytics 4 has no confirmed EU data storage: data is processed in a third country.
Is Google Analytics 4 covered by the CLOUD Act?
The vendor is based outside the EU. US companies are covered by the CLOUD Act regardless of server location; see the tool page for details.
What is needed to use Google Analytics 4 in a GDPR-safe way?
Sign a data processing agreement (DPA) if the tool processes personal data on your behalf, minimise the personal data you feed in, and check the vendor's sub-processors. See our DPA guide for the steps.
Our assessment is based on verified data about vendor, storage and certifications (2026). GDPR compliance also depends on how you use the tool. This is guidance, not legal advice. See How we review.
